Improved HPE6-A42 Practice Test For Implementing Aruba WLAN (IAW) 8 Certification

NEW QUESTION 1
For which use case should network administrators set up Aruba access points (APs) as multi-zone APs?

• A. The company has multiple small branch offices where APs at each branch office must forward internet traffic locally and corporate traffic over a secure tunnel to a centralized Mobility Controller (MC).
• B. The company has some devices that support both 5GHz and 2.4GHz, and the APs must operate in both frequency bands.
• C. The company requires high availability for its wireless services, and APs must be able to be controlled by more than one Mobility Controller (MC) in case a controller fails.
• D. The company has a Mobility Manager (MM)-based solution that requires APs to terminate to multiple controllers that reside in different administrative domains.

Answer: D

NEW QUESTION 2
What is a requirement for the Dashboard > Traffic Analysis window on the Aruba Mobility Master (MM) to show data?

• A. Airmatch and ClientMatch must be enabled.
• B. The solution must have active PEFNG licenses.
• C. Firewall policies must include application filtering rules.
• D. WLANs must use the decrypt-tunnel forwarding option.

Answer: B

NEW QUESTION 3
What is the difference between WPA and WPA2 encryption?

• A. WPA encryption uses symmetric keys, and WPA2 encryption uses asymmetric keys.
• B. WPA encryption acts at Layer 3, and WPA2 encryption acts at Layer 2.
• C. WPA encryption works only with preshared key (PSK) authentication, and WPA2 encryption works with both PSK and 802.1X.
• D. WPA encryption uses TKIP by default, and WPA2 encryption uses AES by default.

Answer: D

NEW QUESTION 4
What is one difference between how a network administrator can monitor clients in the Mobility (MM) interface and in the AirWave Management Platform?

• A. AirWave shows trends for the past several minutes, while MM shows longer trends.
• B. AirWave combines information from more sources, such as RADIUS authenticating servers and APs.
• C. AirWave shows the current signal level for the client connection, while MM does not show RF statistics.
• D. MM shows user and role information associated with clients, while AirWave does not.

Answer: B

NEW QUESTION 5
What does an Aruba Mobility Master (MM) do before it deploys a configuration to a Mobility Controller (MC)?

• A. It encrypts the configuration to be deployed and backs it up to a secure archive.
• B. It obtains the current configuration, encrypts it, and backs it up to a secure archive.
• C. It synchronizes the configuration with templates on Aruba AirWave.
• D. It removes any commands that are not supported on that MC or have dependency errors.

Answer: C

NEW QUESTION 6
A company wants to provide wireless access for visitors with their Aruba solution. Which configuration feature enables the guest to access the wireless network without authentication?

• A. use of internal captive portal with email registration
• B. addition of custom rules to control access for unauthenticated guests
• C. use of internal captive portal with authentication
• D. redirection of guests to an external captive portal that provides encryption services

Answer: B

NEW QUESTION 7
A company plans to deploy a Mobility Master (MM). The MM will manage 50 Mobility Controller (MC) appliances that will control a total of 680 APs, and 10 Virtual Mobility Controllers (VMCs) that will control a total of 160 APs.
How many MM licenses does the company require?

• A. 60
• B. 210
• C. 900
• D. 960

Answer: C

Explanation:
Starting with ArubaOS 8.0.1, the MM license is required to terminate devices (controllers or APs) on Mobility Master. If the Mobility Master does not have sufficient MM licenses and an AP fails to obtain a license, that AP can get an IP address and connect to its controller, but will not broadcast an SSID.

NEW QUESTION 8
Refer to the exhibit.

Network administrators need to set up a WLAN that uses WPA2 encryption and authenticates users with a preshared key (PSK) that is the same for all users. Administrators do not see where they should specify the option for the preshared key.
What should the administrators do?

• A. Click Personal in the slide bar.
• B. Click the + icon in the Authentication server section
• C. Return to the first page in the wizard and select the guest option
• D. Configure an L3 authentication profile after the WLAN wizard is complete

Answer: A

NEW QUESTION 9
An Aruba solution has a WLAN that uses WPA2-Enterprise security. How are encryption keys dynamically managed for the wireless users?

• A. The MM generates and distributes keys to clients and access points (APs).
• B. Administrators configure identical key strings on the Mobility Controllers (MCs) and wireless client 802.1X settings.
• C. Keys are generated and distributed securely during each wireless user authentication process.
• D. Keys are derived from the preshared key configured on the WLAN and on each wireless client.

Answer: C

NEW QUESTION 10
Refer to the exhibit.

The exhibit shows the AAA profile for a WLAN on an Aruba solution. This WLAN uses 802.1X to authenticate users to a RADIUS server. A user successfully authenticates with 802.1X, but the RADIUS server does not send a role assignment.
How does the Aruba firewall handle the role assignment for this user?

• A. It does not assign a role.
• B. It applies the Aruba VSA role employee.
• C. It assigns the logon role.
• D. It assigns the authenticated role.

Answer: D

NEW QUESTION 11
Which type of authentication server should administrators select to authenticate users to a ClearPass server?

• A. Windows
• B. RADIUS
• C. TACACS+
• D. LDAP

Answer: B

NEW QUESTION 12
A company has an Aruba Mobility Master (MM)-based solution. Where can a network administrator look to find a list of alerts about a variety of issues on the MM or managed devices?

• A. the Potential Issues dashboard
• B. the top banner
• C. the MM Maintenance pages
• D. the Performance dashboard

Answer: B

NEW QUESTION 13
A company has an Aruba solution. The company wants to support a guest WLAN with the internal captive portal, but the company also wants to develop their own custom portal pages.
What correctly describes the level of customization that the internal captive portal supports?

• A. The internal captive portal must use the default pages without modification, but administrators can upload pages developed externally.
• B. Administrators can modify the default internal captive portal pages, but cannot upload pages developped externally.
• C. Administrators can modify the default internal captive portal pages or upload pages developped externally.
• D. The internal captive portal must use the default pages without modification, and administrators cannot upload pages developped externally.

Answer: C

NEW QUESTION 14
What is an advantage for a network administrator to use AirWave over a Mobility Master (MM)?

• A. ability to gather and analyze historical user data, and monitor client association and network usage trends
• B. scans wireless client settings and brings those settings in compliance with corporate security policies.
• C. ability to monitor and manage a Mobility Controller (MC) to configure the WLAN
• D. provides realtime firewall hits for client network troubleshooting

Answer: A

NEW QUESTION 15
A network administrator examines a list of 2.4GHz clients with low performance in the Mobility Master (MM) dashboard. Which property for a client should pose a concern as a potential performance issue?

• A. Radio PHY of HT 20MHz
• B. Max speed of 72Mbps
• C. SNR of 18
• D. Usage of 10 MB

Answer: C

NEW QUESTION 16
Refer to the exhibit.

A network administrator needs to specify a RADIUS server for an employee WLAN on an Aruba solution. What must the administrator enter in the Shared key field?

• A. the password defined as the preshared key for the WLAN on the Mobility Master (MM) and on authorized wireless clients
• B. the password configured in a user account with administrative rights on the RADIUS server
• C. the password configured for RADIUS clients on the RADIUS server
• D. the password defined for authorized wireless clients on the RADIUS server and also distributed to authorized wireless clients

Answer: A

NEW QUESTION 17
Refer to the exhibits. Exhibit 1

Exhibit 2

A company has a Mobility Master (MM)-based solution with a guest WLAN. Users can connect to the WLAN, but they receive the error shown browser rather than see login page. Exhibit 2 shows the status for one of the guest clients.
What is one issue that could cause the errors described?

• A. The firewall blocks DHCP traffic between the guest clients and the DHCP server.
• B. The DHCP pool for guests does not assign users a DNS server address.
• C. The MM and Mobility Controllers (MCs) have invalid certificates.
• D. The Captive Portal is not enabled for the role to which these clients are assigned.

Answer: B

NEW QUESTION 18
A network administrator creates an employee WLAN on an Aruba solution that uses WLAN
WPA2-Enterprise security and an external RADIUS server. When the administrator tests the WLAN, the test client receives limited connectivity and cannot access any resources, but the RADIUS server shows that the user authenticated successfully.
What should the administrator check as a possible source of this issue?

• A. the connectivity between the AP that the client is associated to and the MC
• B. the firewall role and policy that apply to this user
• C. the certificate on the RADIUS server
• D. the connectivity between the Master Controller (MC) for the client and the RADIUS server

Answer: B

NEW QUESTION 19
A company has a Mobility Master (MM)-based solution. A network administrator wants to monitor the types of applications in use in the wireless network.
Which dashboard page in the MM interface should the administrator visit?

• A. Security
• B. Performance
• C. Traffic Analysis
• D. Network

Answer: C

NEW QUESTION 20
A WLAN in an Aruba Mobility Master (MM)-based solution uses WPA2-Enterprise security. This WLAN currently authenticates users to Active Directory (AD), and users log in with their Windows domain credentials. Network administrators now want to authenticate the Windows clients as well, based on the client Computer Names.
What should the administrators do on MM to achieve this goal?

• A. Set up Machine Authentication on the WLAN.
• B. Set up Mac Authentication on the WLAN.
• C. Bind individual Mobility Controllers (MCs) to AD at the device level.
• D. Import the computer names from AD to the MM internal database.

Answer: B

NEW QUESTION 21
How does WPA2 protect wireless user traffic in the air?

• A. It provides data integrity with AES and no data privacy.
• B. It provides both data integrity and privacy with AES.
• C. It provides data privacy with TKIP and no data integrity.
• D. It provides data integrity with TKIP and data privacy with AES.

Answer: D

NEW QUESTION 22
Network administrators use the wizard to create a WLAN that uses WPA2-Enterprise security to a RADIUS server at 10.21.98.55. They do not manually change any settings.
Which device determines the EAP type that the wireless clients must support?

• A. Mobility Master (MM)
• B. Mobility Controller (MC)
• C. RADIUS server
• D. AP

Answer: C

NEW QUESTION 23
Which pre-defined role allows DHCP, DNS, and internal captive portal redirection for a guest WLAN?

• A. exam_guest-guest-logon
• B. authorized
• C. guest-logon
• D. guest

Answer: C

NEW QUESTION 24
......